Anomalous Process Binding Intercepting screensharingd Network Traffic (CVE-2026-43779)
Detects a process other than screensharingd bound to or handling network traffic on screensharingd's expected port (5900), indicating exploitation of the connection-interception logic flaw (CVE-2026-43779).
Cortex XDR
